CLEANSTART-2026-GX16359 Security fixes in confluent-common-docker 7.6.9-r3

Package confluent-common-docker version 7.6.9-r3 fixes 4 vulnerabilities: CVE-2025-11226, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-qqpg-mvqg-649v...

CLEANSTART-2026-KF39510 Security fixes in confluent-common-docker 7.6.9-r5

Package confluent-common-docker version 7.6.9-r5 fixes 2 vulnerabilities: ghsa-rwm7-x88c-3g2p, CVE-2026-42577...

CLEANSTART-2026-OL08873 Security fixes in confluent-common-docker 7.6.9-r2

Package confluent-common-docker version 7.6.9-r2 fixes 7 vulnerabilities: CVE-2026-24281, CVE-2026-24308, CVE-2024-29371, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: kayenta-fips, strimzi-kafka-operator-fips, trino, confluent-common-docker, ontop, reposilite, apache-tika-fips, keycloak-config-cli, kafbat-ui-fips, kafka-bridge, localstack, logstash, logstash-fips, kserve-modelmesh, airflow, spark-fips, apache-tika, zookeeper,...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, ruby3.3-jrjackson, apache-nifi-registry, keycloak, sonarqube, celeborn, zipkin, wavefront-proxy, druid, strimzi-kafka-operator, wildfly, tez, airflow, neo4j, spark, jenkins, apache-pulsar, infinispan, nextflow, apache-nifi, solr, kafka,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: cassandra-reaper, ruby3.3-jrjackson, apache-nifi-registry, keycloak, sonarqube, celeborn, zipkin, wavefront-proxy, druid, strimzi-kafka-operator, wildfly, tez, airflow, neo4j, spark, jenkins, apache-pulsar, infinispan, nextflow, apache-nifi, solr, kafka,...

CLEANSTART-2026-RD06185 Security fixes for CVE-2024-29371, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p applied in versions: 7.6.9-r2, 7.6.9-r3, 7.6.9-r4, 7.6.9-r5

Multiple security vulnerabilities affect the confluent-common-docker package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: local-path-provisioner, newrelic-nri-statsd, shfmt, terraform-provider-time, vault-k8s, vexctl, custom-pod-autoscaler-operator, gostatsd, addon-resizer, k8sgpt-operator, cloud-provider-aws, bank-vaults, kuberay-operator, pvc-autoresizer,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: yace-fips, nvidia-nsight-compute-13.0, mattmoor-chainit, mongodb-kubernetes-operator, etcd-fips, confluent-common-docker, pvc-autoresizer, prometheus-beat-exporter-fips, kube-vip-cloud-provider, apm-server-fips, addon-resizer, consul-fips, newrelic-nri-statsd,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: scala, cassandra, cassandra-reaper, spark, druid, tez, gradle-stage0, confluent-common-docker...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: scala, cassandra, cassandra-reaper, spark, druid, tez, gradle-stage0, confluent-common-docker...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, opensearch, apicurio-registry, spdx-tools-java, sonarqube, jenkins, celeborn, apache-activemq-artemis, jenkins-plugin-manager, trino, druid, strimzi-kafka-operator, wildfly, apache-nifi, tez, confluent-common-docker, akhq...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, opensearch, apache-activemq-artemis, wildfly, trino, confluent-common-docker, jenkins, spdx-tools-java, akhq, apicurio-registry, hadoop-fips, kafka, tez, hadoop-client-modules, celeborn, ghidra, jenkins-plugin-manager,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, dockerize, descheduler, tfsec, direnv, mods, paranoia, kube-metrics-adapter, volume-modifier-for-k8s, falcosidekick, tempo, aws-signer-notation-plugin, kapp-controller, redka, frp, nri-jmx, xcaddy, openfga,...